Access controller that controls access to files by using access control list

a technology of access control and file control, which is applied in the direction of electric digital data processing, instruments, computing, etc., can solve the problem of huge number of files stored in storage devices

Active Publication Date: 2013-09-24
HITACHI LTD
View PDF11 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Benefits of technology

[0007]Therefore, an object of the present invention is to be able to perform access control using an ACL that corresponds with a file system of the type following the switch without stopping services.

Problems solved by technology

In general, the number of files stored in a storage device is huge.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Access controller that controls access to files by using access control list
  • Access controller that controls access to files by using access control list
  • Access controller that controls access to files by using access control list

Examples

Experimental program
Comparison scheme
Effect test

first embodiment

[0045]FIG. 1 shows a constitutional example of the whole system according to the first embodiment of the present invention.

[0046]The NAS system (100) is constituted by a NAS control module (121) (a so-called ‘NAS head’, for example) and one or a plurality of storage devices (131). The storage devices (131) may, for example, be one or a plurality of storage media drives or a storage subsystem that comprises a plurality of storage media drives.

[0047]The NAS control module (121) is able to communicate with a CIFS (Common Internet File System) client (111) that issues CIFS-based file access requests and an NFS (Network File System) client (113) that issues NFS-based file access requests. The NAS control module (121) receives a file access request from client (111) or (113) and provides client (111) or (113) with services for accessing the file designated by the file access request which is stored in a region corresponding with a logical storage space (130) of the storage device (131). F...

second embodiment

[0108]The second embodiment of the present invention will be described hereinbelow. Here, the differences from the first embodiment will be mainly described and a description of the points in common with the first embodiment will be omitted or simplified (the same is also true of the subsequent third to fifth embodiments).

[0109]In the writing necessity judgment processing of the first embodiment, in cases where the file system is a read only mount file system, the converted NTFS ACL is not written to the storage device (131) but can instead be processed as follows.

[0110]FIG. 7 is a flowchart for write necessity judgment processing of a second embodiment of the present invention.

[0111]The ACL conversion module (126) references the file system information (128) and judges whether the target file system has been mounted as a read only file system (S701). In cases where the target file system has been mounted as a read only file system, the ACL conversion module (126) then judges whethe...

third embodiment

[0114]FIG. 8 is a flowchart for write necessity judgment processing of the third embodiment of the present invention.

[0115]The ACL conversion module (126) is information references file access statistical information (information representing statistics such as the file access count which is information that is updated each time a file is accessed, for example) and judges whether the file access count has reached a prescribed count (ten times, for example) (S801).

[0116]In cases where the access count is less than the prescribed count, the ACL conversion module (126) judges that writing is not required (S803) and terminates the processing. However, in cases where the access count is equal to or more than the prescribed count, the ACL conversion module (126) judges that writing is required (S802) and terminates the processing.

[0117]Thus, where files for which access has only occurred a few times, compression of the spare capacity can be prevented due to the fact that the converted NTF...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

Each time the file access request is received, it is discriminated whether there is an ACL which corresponds with the file system of the type following the switching in the file designated by the file access request. In cases where the judgment result is that there is no such ACL, an ACL which corresponds with the file system of the type following the switching is generated on the basis of an ACL which corresponds with the file system of the type prior to the switching which is associated with the designated file, and the ACL thus generated is used to control access in accordance with the received file access request.

Description

CROSS-REFERENCE TO PRIOR APPLICATION[0001]The present application is a continuation of application Ser. No. 12 / 020,760, filed Jan. 28, 2008 now U.S. Pat. No. 8,260,811; which relates to and claims the benefit of priority from Japanese Patent Application number 2007-241563, filed on Sep. 18, 2007, the entire disclosure of which is incorporated herein by reference.BACKGROUND OF THE INVENTION[0002]The present invention generally relates to a technology for controlling access to files by using a file control list.[0003]Generally, a file server (for example, NAS (Network Attached Storage)) is used in order to share files between a plurality of clients (users). Access to the shared files is controlled using an access control list (‘ACL’ hereinbelow). The ACL describes which users are able to access files in which operations, for example.[0004]Representative examples of ACL include POSIX ACL, which is used by UNIX (registered trademark), and NTFS ACL, which is employed by Windows (register...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityPatents(United States)
IPC IPC(8): G06F17/30G06F7/00G06F21/60G06F21/62
CPCG06F21/6218G06F21/805H04L63/101G06F2221/2105G06F2221/2141
InventorURANO, AKIHIRONAKAMURA, TAKAKIKAMEI, HITOSHIAGETSUMA, MASAKUNIYAMASAKI, YASUO
OwnerHITACHI LTD